PyInit__imaging
Static task
static1
Behavioral task
behavioral1
Sample
b8c16b7f2dbf2cbaf0931e21da493370N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8c16b7f2dbf2cbaf0931e21da493370N.dll
Resource
win10v2004-20240709-en
General
-
Target
b8c16b7f2dbf2cbaf0931e21da493370N.exe
-
Size
2.2MB
-
MD5
b8c16b7f2dbf2cbaf0931e21da493370
-
SHA1
5ee91edf1618a854cf1f47d4fd39b88a993c52e2
-
SHA256
1761a67791114c2a3887b063f91e7f9ed27166dc759215ae7e190bcb3d84a34c
-
SHA512
cae9d5645e3272deda1d75a6752fa5280ea927fb01c2b99bce02d67c6f5d269aa93d2eca878240ce6641d64d902432ccd5c9071346dad9aa2799c20635c551bf
-
SSDEEP
49152:XUPrrq1ErZYCHD8/54w8mrkXQaDjIsiI:EPxnlX7jiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8c16b7f2dbf2cbaf0931e21da493370N.exe
Files
-
b8c16b7f2dbf2cbaf0931e21da493370N.exe.dll windows:6 windows x86 arch:x86
c13ac1bd721e3c6c149b114396831bb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteFile
GetLastError
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
ReadFile
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObjectEx
SetThreadPriority
SetFilePointer
GetFileSizeEx
GetSystemInfo
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GlobalUnlock
FreeLibrary
GlobalLock
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalSize
GetCurrentThreadId
user32
GetMessageA
DispatchMessageA
GetWindowRect
LoadCursorA
GetDC
FillRect
EndPaint
BeginPaint
GetSystemMetrics
ShowWindow
OpenClipboard
SetWindowLongA
CloseClipboard
GetWindowLongA
EnumClipboardFormats
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
GetClipboardData
LoadIconA
SetForegroundWindow
InvalidateRect
RegisterClipboardFormatA
ReleaseDC
gdi32
CreateCompatibleBitmap
BitBlt
SelectObject
SetWinMetaFileBits
CreateDIBSection
CreateCompatibleDC
GdiFlush
PlayEnhMetaFile
SetEnhMetaFileBits
GetStockObject
GetDIBits
DeleteEnhMetaFile
GetDeviceCaps
DeleteDC
DeleteObject
CreateDCA
SelectPalette
GetSystemPaletteEntries
StretchDIBits
RealizePalette
StretchBlt
SetDIBColorTable
CreatePalette
python310
PyExc_IndexError
_Py_TrueStruct
PyObject_Print
PyList_SetItem
PyUnicode_FromString
PyExc_TypeError
PyObject_Size
_PyObject_New
PyBytes_FromStringAndSize
PyExc_OSError
PyEval_RestoreThread
PyExc_RuntimeError
PyUnicode_Type
PySequence_Check
PyThreadState_Get
_PyObject_CallFunction_SizeT
PySys_GetObject
PyFile_WriteString
PyErr_Print
PySequence_Size
PyDict_New
PyNumber_AsSsize_t
PyNumber_Check
PyThreadState_Swap
PyIndex_Check
PyCapsule_New
PyErr_Clear
_PyObject_CallMethod_SizeT
PyType_Ready
PyModule_Create2
PyList_New
PyErr_ExceptionMatches
PySequence_Fast
PyObject_GetBuffer
PyLong_AsLong
PyObject_CallFunction
_PyArg_ParseTuple_SizeT
PyObject_CheckBuffer
PyModule_AddObject
Py_BuildValue
PySlice_Unpack
PyObject_Free
PySequence_GetItem
PySlice_Type
PySlice_AdjustIndices
PyArg_ParseTuple
PyExc_MemoryError
PyObject_CallMethod
PyLong_AsSsize_t
PyExc_SystemError
PyObject_IsTrue
PyDict_GetItem
PyList_GetItem
PyBytes_Size
PyTuple_Size
PyModule_GetDict
PyTuple_GetItem
_PyBytes_Resize
PyErr_SetFromErrno
PyErr_Format
PyList_Size
PyErr_NoMemory
_Py_Dealloc
PyType_IsSubtype
PyFloat_Type
_Py_FalseStruct
PyExc_ValueError
PyErr_SetString
PyFloat_FromDouble
PyDict_SetItemString
PyTuple_New
PyLong_AsLongLong
_Py_NoneStruct
PyBytes_AsStringAndSize
PyFloat_AsDouble
PyUnicode_AsLatin1String
PyLong_FromLong
PyEval_SaveThread
PyLong_FromSsize_t
PyErr_Occurred
PyBytes_AsString
_PyErr_BadInternalCall
PyModule_AddIntConstant
_Py_BuildValue_SizeT
PyBool_FromLong
PyBuffer_Release
vcruntime140
longjmp
memset
memmove
_setjmp3
__std_type_info_destroy_list
memcpy
_except_handler4_common
api-ms-win-crt-heap-l1-1-0
_aligned_malloc
_aligned_free
calloc
free
malloc
realloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
_lseek
_write
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
_get_osfhandle
fwrite
fclose
fopen
__stdio_common_vsprintf
api-ms-win-crt-string-l1-1-0
strncmp
_strdup
strncpy
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
exit
_initialize_onexit_table
_cexit
_execute_onexit_table
_beginthreadex
api-ms-win-crt-math-l1-1-0
lround
fmax
roundf
round
hypot
floor
_libm_sse2_pow_precise
ceil
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_log10_precise
fmin
_libm_sse2_sqrt_precise
_libm_sse2_exp_precise
_CIfmod
_libm_sse2_cos_precise
_CIatan2
api-ms-win-crt-utility-l1-1-0
rand
bsearch
qsort
api-ms-win-crt-environment-l1-1-0
getenv
getenv_s
api-ms-win-crt-convert-l1-1-0
atoi
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 501KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ